$ rpki-client -vvf rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/0E0A2B9A5C9C11F08CB7E148C4F9AE02.roa File: 0E0A2B9A5C9C11F08CB7E148C4F9AE02.roa (raw, json) Hash identifier: /uTCkM+7T3MX4CR0F7TNTBgsSs4yKxKjHNmhUVycHRc= Subject key identifier: 1E:B8:F5:8E:C7:1B:A7:D3:3A:8E:E1:42:33:8B:D7:E5:B1:CB:EC:58 Certificate issuer: /CN=A91362EB/serialNumber=54A24DC68DF2640E7BB3FF0F36B78EF88400C30F Certificate serial: 02 Authority key identifier: 54:A2:4D:C6:8D:F2:64:0E:7B:B3:FF:0F:36:B7:8E:F8:84:00:C3:0F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VKJNxo3yZA57s_8PNreO-IQAww8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/0E0A2B9A5C9C11F08CB7E148C4F9AE02.roa Signing time: Wed 09 Jul 2025 08:09:37 +0000 ROA not before: Wed 09 Jul 2025 08:09:37 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 393677 IP address blocks: 165.99.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.crl rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VKJNxo3yZA57s_8PNreO-IQAww8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:25:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91362EB, serialNumber=54A24DC68DF2640E7BB3FF0F36B78EF88400C30F Validity Not Before: Jul 9 08:09:37 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=686e23c1-5fe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1f:df:99:d7:97:8b:e7:e2:cd:43:a5:a5:00: 2b:4a:2f:09:36:e0:87:bc:d1:31:e3:31:9a:b8:64: 55:d4:65:f7:4b:df:95:6f:c8:96:78:32:5b:3f:0f: 89:a6:2e:1a:e7:e6:d2:ac:4c:39:e0:6b:64:59:2b: ad:7f:a9:04:c8:3c:4e:b9:14:82:0f:60:31:1c:a1: 9c:c6:5f:cf:95:42:38:eb:da:be:c0:77:75:58:ee: 82:57:25:d7:1e:f7:6e:9e:ea:05:d4:3d:8e:7d:bf: c0:07:24:6d:e7:0c:c4:6f:43:6a:6c:df:b1:33:e0: 65:b9:a1:f2:4c:64:6b:f8:1c:5f:7e:fd:de:4d:6c: d1:69:5c:f7:34:a0:30:2b:73:85:38:6a:a5:be:09: f5:2e:91:3c:c4:2a:1d:e0:f0:0f:82:03:6f:40:51: 54:c0:2d:31:bc:04:f2:b6:f1:b8:0e:34:31:eb:ca: e2:fc:21:4c:75:b4:59:e5:2f:b6:9a:66:c6:9d:ce: fb:82:14:75:b9:ee:ed:e6:ac:d8:da:8a:a2:0d:44: 10:0a:95:8e:c2:0d:60:16:f7:08:2a:4b:c8:01:3d: 00:4c:21:7f:93:ce:b3:fb:f7:12:82:a0:7f:e6:ae: ab:73:c9:c8:e9:42:dd:84:db:1f:87:c9:df:ec:1e: 12:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:B8:F5:8E:C7:1B:A7:D3:3A:8E:E1:42:33:8B:D7:E5:B1:CB:EC:58 X509v3 Authority Key Identifier: keyid:54:A2:4D:C6:8D:F2:64:0E:7B:B3:FF:0F:36:B7:8E:F8:84:00:C3:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/VKJNxo3yZA57s_8PNreO-IQAww8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VKJNxo3yZA57s_8PNreO-IQAww8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91362EB/DF545CC85C9911F0B4BE1E21C4F9AE02/0E0A2B9A5C9C11F08CB7E148C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 165.99.116.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:ff:8f:ac:2e:1f:b9:9d:d2:2f:bb:2e:c9:3e:a7:b0:17:9b: 61:8f:37:c6:94:46:c4:c7:86:e0:6e:84:3b:7a:cb:ba:97:44: 00:a5:ee:d2:76:48:dc:8e:28:d5:be:f7:47:28:44:da:58:0f: b4:3c:b4:8a:72:8f:11:33:02:99:dd:13:1b:06:7b:3b:79:f1: 10:d6:a0:c1:1f:30:22:d2:2f:96:58:46:8f:ab:5f:9b:c6:e6: 46:b6:a8:4c:b7:1f:31:55:4c:c8:a1:e6:3f:6c:15:7b:07:98: 11:90:c6:f6:7b:42:62:28:c2:a6:3d:78:3d:32:a8:eb:70:ed: af:75:08:a6:c2:33:46:6c:af:12:c8:33:7d:fd:f5:a6:c5:ab: 77:15:9e:87:c6:69:93:c5:cb:4e:d9:c5:2c:d0:8c:3d:97:42: 2d:ff:7b:1d:e7:00:fe:e6:7f:c4:96:e4:29:23:fe:e1:60:4c: 24:66:b8:9b:4c:66:e6:d9:8a:f2:ea:ce:34:55:f5:61:85:d1: 83:ae:16:69:23:58:60:53:2f:5f:98:dc:1c:df:c5:3f:78:49: e2:50:94:32:fd:29:e0:66:81:c2:4d:ff:bf:d1:f3:e3:6e:9a: 9c:07:d7:e8:42:14:c5:87:09:33:d0:16:a7:95:59:fb:80:bb: 00:65:94:ac -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NjJFQjExMC8GA1UEBRMoNTRBMjREQzY4REYyNjQwRTdCQjNGRjBGMzZCNzhFRjg4 NDAwQzMwRjAeFw0yNTA3MDkwODA5MzdaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4NmUyM2MxLTVmZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4H9+Z15eL5+LNQ6WlACtKLwk24Ie80THjMZq4ZFXUZfdL35VvyJZ4Mls/D4mm Lhrn5tKsTDnga2RZK61/qQTIPE65FIIPYDEcoZzGX8+VQjjr2r7Ad3VY7oJXJdce 926e6gXUPY59v8AHJG3nDMRvQ2ps37Ez4GW5ofJMZGv4HF9+/d5NbNFpXPc0oDAr c4U4aqW+CfUukTzEKh3g8A+CA29AUVTALTG8BPK28bgONDHryuL8IUx1tFnlL7aa ZsadzvuCFHW57u3mrNjaiqINRBAKlY7CDWAW9wgqS8gBPQBMIX+TzrP79xKCoH/m rqtzycjpQt2E2x+Hyd/sHhL1AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUHrj1jscb p9M6juFCM4vX5bHL7FgwHwYDVR0jBBgwFoAUVKJNxo3yZA57s/8PNreO+IQAww8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2MkVCL0RGNTQ1Q0M4NUM5 OTExRjBCNEJFMUUyMUM0RjlBRTAyL1ZLSk54bzN5WkE1N3NfOFBOcmVPLUlRQXd3 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVktKTnhvM3laQTU3c184UE5yZU8tSVFBd3c4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjJFQi9ERjU0NUNDODVDOTkxMUYwQjRCRTFFMjFDNEY5QUUwMi8wRTBBMkI5QTVD OUMxMUYwOENCN0UxNDhDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKVjdDANBgkqhkiG9w0BAQsFAAOCAQEADv+PrC4fuZ3SL7su yT6nsBebYY83xpRGxMeG4G6EO3rLupdEAKXu0nZI3I4o1b73RyhE2lgPtDy0inKP ETMCmd0TGwZ7O3nxENagwR8wItIvllhGj6tfm8bmRraoTLcfMVVMyKHmP2wVeweY EZDG9ntCYijCpj14PTKo63Dtr3UIpsIzRmyvEsgzff31psWrdxWeh8Zpk8XLTtnF LNCMPZdCLf97HecA/uZ/xJbkKSP+4WBMJGa4m0xm5tmK8urONFX1YYXRg64WaSNY YFMvX5jcHN/FP3hJ4lCUMv0p4GaBwk3/v9Hz426anAfX6EIUxYcJM9AWp5VZ+4C7 AGWUrA== -----END CERTIFICATE-----Generated at Sun Jul 20 06:28:29 2025 by rpki-client